SSMC: Accept Certificate Warning - The certificate has expired

[Ruster007]

Hi guys - newbie here - go easy.

I've recently setup the SSCM 3.6 vmware appliance and have now started to add our 3par storage arrays in the console.

On the Actions menu, when I select "Accept Certificate", I recieve the following message:

Warning: The certificate has expired

The certificate is only valid for HP_3PAR 8400-SGH624YPC9

Warning: The certificate has expired

As a result, I'm unable to conect to the storage arrays.

Can anyone provide me with a process to address this issue?

Also, is there any imact/downtime by implementing this process.

Thanks

[Sheldon Smith · Accepted solution]

Offhand, it sounds like the system's self-signed cert has expired. You will need to connect to the array itself using the command line interface, either external CLI or PuTTY.

Once logged in, enter the following to update the self-signed cert. It would be good for ten years.

createcert unified-server -selfsigned -keysize 2048 -days 3650

Then try to connect with SSMC again. See the HPE 3PAR Command Line Interface Reference for more information on the createcert command. 

[Ruster007]

Thanks for your reply Sheldon - 

Is there any downtime or adverse impact expected by performing this operation during production/work hours?

Thanks

[Sheldon Smith]

None. This is a "management thing" [a technical term <wink>]. It has nothing to do with iSCSI traffic and protocol.

[Ruster007]

Appreciate your help - Thank you

[Dardan]

Hi @Ruster007 

If you happen to consider installing CA certificates on you 3PAR / StoreServ or Primera array, I've created a step-by-step procedure on how to do it. Might be interesting for others as well.

Implementing CA Certificates on Primera GUI

[Ruster007]

Thanks Dardan

I tried that link but it seems to be broken ...

Cheers

[Dardan]

Should be alright now. Cheers

[Kiransampya]

i have followed the steps which still same error.

[lvredrider]

FYI if you don't the -days parameter like this:

createcert unified-server -selfsigned -CN "your_array_CN"

the default is 3 years.